Network node and mobile terminal

ABSTRACT

A technique is disclosed, according to which a mobile node, having a plurality of interfaces and performing communication according to flow information when an operator is performing communication based on the flow information as defined by a policy, can select an interface suitable for the flow and can perform communication. According to this technique, a mobile node (MN  10 ) having a plurality of interfaces has a list to indicate domain limited flows to be transmitted only within a specific network (a trusted network), and a list to indicate the trusted networks. When a certain interface performs handover, and in case there is a domain limited flow that uses the interface, it is decided whether the network of handover destination is a trusted network or not, and in case the network of the handover destination is not a trusted network, it is decided whether it is possible or not to transmit and receive the domain limited flow via another interface that is connected to the trusted network.

BACKGROUND

1. Technical Field

The present invention relates to a network node and a mobile terminalrelating to a communication technique using the Internet Protocol (IP).In particular, the invention relates to a network node and a mobileterminal for performing processing to change a route of flow.

2. Description of the Related Art

In the Non-Patent Document 1 as given below, for instance, a techniqueis disclosed, according to which a mobile node (MN) associates andregisters a care-of address (CoA) and a home address (HoA) to its ownhome agent (HA) by using the mobile IPv6 (MIPv6). By this technique, thereachability of the mobile node can be accomplished even in case themobile node is located at a location separated away from the homenetwork.

On the other hand, when there are provided portable electronic deviceswhere a plurality of network interfaces are incorporated, a mobile nodehas a function to register a plurality of CoA's (multiple CoA) to apredetermined home agent address. On this registration method,discussion is made in the Working Group of Monami6 (Mobile Nodes andMultiple Interfaces in IPv6) of IETF (Internet Engineering Task Force).

Also, in the Non-Patent Document 2 as given below, a technique isdisclosed, according to which the multiple CoA can be registered byintroducing Binding Unique Identification (BID), i.e., an identificationnumber to identify a plurality of bindings to a single HoA. BID isassigned to an interface or to a CoA associated with a certain homeaddress (HoA) of the mobile node. Therefore, HoA is associated with themobile node, and BID identifies each binding registered by the mobilenode. The mobile node notifies BID to its own home agent by BindingUpdate (BU), and the home agent records BID in a binding cache.

Further, in the Non-Patent Document 3 as given below; it is describedthat the routing of a traffic flow can be selectively performed by usinga plurality of CoA's when the mobile node and/or the router set uppreference information to the home agent. Each traffic flow isidentified by unique flow identification information (FID), and themobile node and/or the router can select CoA, to which the routing of aspecific traffic flow should be made, and the FID is associated with asuitable BID, and this can be registered to HA.

However, the setting of the preference relating to the traffic flowroute is not always made by the mobile node and/or the router. Under acertain circumstance, operation to select a suitable route of thetraffic flow is carried out by a service provider that performscommunication with the mobile node and/or the router. For instance, itis supposed here that a user of the mobile node receives “i mode”(registered trademark) from the service provider. The traffic of “imode” (registered trademark) is a traffic flow restricted within adomain, and this traffic flow is transmitted only within a trustednetwork of the service provider. As to be described later, therestricted traffic flow where transmission is performed only within acertain domain is referred to as “domain limited flow” in the presentspecification. In such case, an entity (e.g., HA) belonging to theservice provider notifies the mobile node by defining a method toforward the domain limited flow. By the notification of the information,the service provider can control the forwarding of the domain limitedflow by the mobile node.

The interface of the mobile node can be shifted (change of connection orchangeover of connection) to a different access network. Therefore, theinterface of the mobile node may be shifted from a trusted network to anon-trusted network. As to be described below, a network directlymanaged by a certain service provider or managed by an operator, whichis in trust relation, is referred to as a trusted network in the presentspecification, and a network other than the trusted network is referredas a non-trusted network.

However, when it is shifted to the non-trusted network, a network flowprofile generated by the service provider may not be updated to thenewest information. For instance, in case a domain limited flow istransferred via an interface while the mobile node is moving, the mobilenode must make up filter rules relating to the domain limited flowaccording to a network profile generated by the service provider, andthere is a possibility that the domain limited flow may be forwarded tothe non-trusted network by referring to a network flow profile, which isnot updated.

Specifically, according to the conventional method to notify the flowinformation from the network side (e.g., from HA) to the mobile node,even after the network where the interface is connected is changed overdue to the moving of the mobile node, the mobile node itself cannotcorrectly decide whether the interface may be continuously used as aninterface to transmit and receive a packet relating to the flow. Also,when it is wanted to transmit and receive the flow via the otherinterface in order to prevent packet loss during the handover, themobile node itself cannot correctly decide whether or not the flow maybe transmitted via the interface that is not specified in the flowinformation.

To solve this problem, there is a method to use a network trigger thatis transmitted before the interface of the mobile node changes over theconnection point. For instance, it is supposed here that the mobile nodehas a 3G (third generation) cellular interface and a WLAN (WirelessLocal Area Network) interface, and that these two interfaces are presentin a trusted access network.

The access point, to which the WLAN interface is connected, constantlymonitors the connection of the WLAN interface. For instance, the accesspoint monitors a threshold level of electric power/signal intensity ofthe WLAN interface. When the access point detects that electricpower/signal intensity from the WLAN interface reaches a value equal toor lower than the threshold level, it is decided that the WLAN interfacehas moved out of the communication range of the access point. Then, theaccess point transmits a trigger to the mobile node. This trigger is a“link going down” trigger as used in IEEE 802.21, for instance.

When the mobile node receives a trigger to indicate that WLAN interfaceis moving out of the communication range of the access point, a methodbased on the fast mobile IPv6 (FMIPv6) as defined in the Non-PatentDocument 4 as given below is carried out, and it is tried to connect toan access point in the vicinity. By using FMIPv6, the mobile node canacquire a new CoA at an access point of the mobile destination of theinterface.

The mobile node can transmit a binding update (BU) to update bindingentry of the mobile node to HA by using this CoA. When the BU isreceived, HA checks whether CoA offered from the mobile node is made upby a prefix of the service provider or not.

If HA decides that the mobile node has moved to a non-trusted accessnetwork, the network flow profile of the mobile node is updated so thatthe domain limited flow is transmitted via the interface of the mobilenode that is still present in the trusted access network. Then, HAnotifies the mobile node to transfer the domain limited flow via HoA/CoAof the 3G interface by updating the network profile of the mobile node,for instance. The updated network profile is transmitted from HA by abinding acknowledgment (BA) to the mobile node.

Instead of the method, by which HA updates the network flow profile ofthe mobile node, there is a method that the mobile node has the functionto update the network flow profile and notifies the change of thenetwork flow profile to HA.

The Patent Document 1 as given below discloses an arrangement ofapplication that is applied to a mobile node having a plurality ofinterfaces. In this case, the mobile node requests a profile specific tothe application to activate the application mounted on the mobile nodeto the profile server. The profile server prepares or reads a profilespecific to the application, and sends the profile specific to theapplication to the mobile node. Then, the mobile node can interpret thisprofile specific to the application as a policy rule to carry outselective control of one or more communication interfaces of the mobilenode during the operation of the application.

As described above, according to the prior art, when MN registers aplurality of CoA's to HA, MN notifies flow information to HA for thepurpose of specifying a CoA used as the transfer destination of thepacket to HA. The flow information is to specify the CoA, to which aspecific flow transmitted and received by MN is to be transferred. HAselects the transfer destination of the packet to MN according to thisflow information notified from MN.

On the other hand, similar flow information can be notified from HA toMN. In this case, the flow information is generated according to apolicy of the network side. When the packet is transmitted, MN selectsan interface to be used according to the flow information notified fromHA.

[Patent Document 1] U.S. Patent Application Publication No. 2007-0004393

-   [Non-Patent Document 1] D. Johnson, C. Perkins, and J. Arkko:    “Mobility Support in IPv6”; Internet Engineering Task Force, Request    for Comments 3775; June 2004.-   [Non-Patent Document 2] R. Wakikawa, T. Ernst, and K. Nagami:    “Multiple Care-of Addresses Registration”; Monami6 Working Group    Internet Draft, Mar. 5, 2007.-   [Non-Patent Document 3] H. Soliman, K. ElMalki, and C. Castelluccia:    “Flow Bindings in Mobile IPv6 and Nemo Basic Support”; Internet    Engineering Task Force Internet Draft; February 2007.-   [Non-Patent Document 4] R. Koodli, Editor: “Fast Handovers for    Mobile IPv6”; Internet Engineering Task Force Request for Comments    4068; July 2005.

However, in the method to use the network trigger to be received priorto the changeover of the connection point as described above, the accesspoint must have the function to detect connectivity of the interface ofthe mobile node (i.e., the function to detect cutoff of the connectionwith the mobile node in advance and to have the trigger). Also, aproblem may arise that the mobile node should be provided with FMIPv6for acquiring CoA prior to the handover. For instance, in case theaccess point does not have the function to detect the connectivity ofthe interface of the mobile node, delay may occur before the mobile nodereceives the updated network flow profile, and the mobile node mayforward the domain limited flow via the non-trusted network because ofthe delay.

Also, when the electric power and/or signal intensity of the interfaceof the mobile node changes near the threshold level as defined at theaccess point, there is a problem in this method that the access pointmay continuously transmit the network trigger, suggesting thepossibility that the link of the interface may be cut off to the mobilenode.

As a result, there may arise the problems such as: a problem that amultiple of network triggers may be continuously transmitted from theaccess point to the mobile node, or a problem that the mobile node mayupdate redundant binding entry according to a multiple of networktriggers, and a multiple of the network flow profiles may be transmittedfrom HA to the mobile node. As a result, the load of the processing inthe range of the network or the devices may be consumed uselessly.

According to the technique disclosed in the Patent Document 1, themobile node selects an interface by referring to the profile specific tothe application as stored in the mobile node, but there is no mention ona method to update the profile or a method to change over the interfacein case network status has changed due to the handover or to the changeof network environment.

BRIEF SUMMARY

To solve the above problems, the present invention provides anarrangement so that a mobile node (mobile terminal) having a pluralityof interfaces and performing communication according to flow informationdefined by an operator based on a policy can select an interfacesuitable for the flow and can perform communication.

To attain the above object, the present invention provides a mobileterminal, which comprises

a plurality of interfaces;

flow information holding unit that holds flow information as notifiedfrom an operator of a network connected by one of said plurality ofinterfaces and holds flow information to specify an interface fortransmitting and receiving the flow; and

confirming unit that confirms, regarding a specific flow, whether it ispossible or not to have communication via another interface differentfrom an interface specified in advance by said flow information.

With the arrangement as described above, the mobile node itself that hasa plurality of interfaces and performing communication according to flowinformation defined by an operator based on a policy, can performcommunication by selecting an interface suitable for the flow.

Also, in addition to the above arrangement, the mobile terminal of thepresent invention provides the mobile terminal as described above,wherein:

flow identification information holding unit that holds information foridentifying a flow transmissible and receivable only via a specificnetwork;

network identification information holding unit that holds informationto identify said specific network; and

said confirming unit is designed to confirm whether it is possible ornot to perform communication via said another interface regarding saidspecific flow according to the information held by said flow informationholding unit and said network identification information holding unit.

With the arrangement as described above, it is possible to confirmwhether transmission and receiving can be carried out by using the otherinterface with respect to a domain limited flow that is transmitted andreceived via a certain interface.

Further, in addition to the above arrangement, the mobile terminal ofthe present invention provides the mobile terminal as described above,wherein:

said confirming unit decides whether said specific flow is a flowtransmissible and receivable only via said network according to theinformation held by said flow identification information holding unit,and in case said specific flow is a flow transmissible and receivableonly via said specific network, it is further decided whether saidanother interface is connected to a specific network or not, and in casesaid another interface is connected to said specific network, it isdecided that communication via said another interface can be performedon said specific flow.

With the arrangement as described above, it is possible to confirmwhether transmission and receiving can be carried out by using the otherinterface with respect to a domain limited flow that is transmitted andreceived via a certain interface.

Also, in addition to the above arrangement, the mobile terminal of thepresent invention provides the mobile terminal as described above,wherein:

said confirming unit decides whether said specific flow is a flowtransmissible and receivable only via said specific network according tothe information held by said flow identification information holdingunit, and in case said specific flow is not a flow transmissible andreceivable only via said specific network, it is decided that theinterface now in use can be continuously used.

With the arrangement as described above, it is possible to confirmwhether transmission and receiving can be carried out by continuouslyusing the present interface with respect to a domain limited flow thatis transmitted and received via a certain interface.

Further, in addition to the above arrangement, the mobile terminal ofthe present invention provides the mobile terminal as described above,wherein:

said specific network is a network approved by said operator.

With the arrangement as described above, the domain limited flow can betransmitted only within the trusted network that is approved by theoperator.

Also, in addition to the above arrangement, the mobile terminal of thepresent invention provides the mobile terminal as described above,wherein:

said mobile terminal comprises flow change requiring or non-requiringinformation holding unit that holds information as to whether it isnecessary to change the flow information relating to said specific flowin case an interface transmitting and receiving a specific flow performshandover for each flow; and

said confirming unit confirms whether it is necessary or not to changethe flow information relating to said specific flow at the time of saidhandover.

With the arrangement as described above, it is possible to specify aCoA-bind flow where the change of the flow information is needed at thetime of the handover.

Further, in addition to the above arrangement, the mobile terminal ofthe present invention provides the mobile terminal as described above,wherein:

said mobile terminal has network identification information holding unitthat holds information to identify a specific network where saidspecific flow can be transmitted and received; and

in case it is decided that it is necessary to change the flowinformation relating to said specific flow at the time of said handoveraccording to the information held by said flow change requiring ornon-requiring information holding unit, said confirming unit confirmswhether communication via said another interface can be performed or notfor said specific flow according to the information held by said networkidentification information holding unit.

With the arrangement as described above, it is possible to confirmwhether transmission and receiving can be carried out by using the otherinterface with regard to the CoA-bind flow.

Also, in addition to the above arrangement, the mobile terminal of thepresent invention provides the mobile terminal as described above,wherein:

said mobile terminal has inquiry unit that makes inquiry to apredetermined communication device existing in said network as towhether or not communication via said another interface can be performedon said specific flow; and

in case it is decided that it is necessary to change the flowinformation relating to said specific flow at the time of handoveraccording to the information held by said flow change requiring ornon-requiring information holding unit, said confirming unit decidesthat said inquiry unit makes inquiry as to whether it is possible or notto perform communication via said another interface on said specificflow.

With the arrangement as described above, when it is necessary to confirmwhether transmission and receiving are carried out by using the otherinterface with respect to the CoA-bind flow, the mobile terminal canmake an inquiry to a communication device that is located on the networkside.

Further, to attain the above object, the present invention provides anetwork node as described above, wherein:

flow information notifying unit that notifies the flow information on aflow transmitted and received by a mobile terminal having a plurality ofinterfaces; and

flow condition information notifying unit that notifies information, bywhich said mobile terminal can confirm whether communication can beperformed or not via another interface different from an interface asspecified in advance by said flow information with regard to a specificinformation.

With the arrangement as described above, the mobile node itself having aplurality of interfaces and performing communication according to theflow information defined by an operator based on a policy can performcommunication by selecting an interface suitable for the flow.

Also, in addition to the above arrangement, the present inventionprovides the network node as described above, wherein:

flow identification information notifying unit that notifies informationto identify said flow transmissible and receivable only via a specificnetwork; and

network identification information notifying unit that notifiesinformation to identify said specific network.

With the arrangement as described above, the mobile terminal can confirmwhether it is possible or not to perform transmission and receiving byusing the other interface on a domain limited flow that is transmittedand received via a certain interface.

Further, in addition to the above arrangement, the present inventionprovides the network node as described above, wherein:

there is provided flow change requiring or non-requiring informationnotifying unit that notifies information as to whether it is necessaryor not to change the flow information relating to said specific flow incase an interface transmitting and receiving a specific flow performshandover with regard to each flow of said mobile terminal.

With the arrangement as described above, it is possible to specify aCoA-bind flow, for which the change of the flow information is needed atthe time of the handover.

Also, in addition to the above arrangement, the present inventionprovides the network node as described above, wherein:

said flow condition information notifying unit decides whether it ispossible or not to perform communication via a specific interface withregard to said specific flow in case an inquiry relating to saidspecific flow and said specific interface is received from said mobileterminal and notifies the result of the judgment to said mobileterminal.

With the arrangement as described above, it is possible to give anadequate reply to an inquiry from a mobile terminal that needsconfirmation as to whether it is possible or not to perform transmissionand receiving via the other interface with regard to the CoA-bind flow.

The present invention has the arrangement as described above, and it hassuch effects that a mobile node having a plurality of interfaces andperforming communication according to flow information defined by anoperator based on a policy can perform communication by selecting aninterface suitable for the flow.

BRIEF DESCRIPTION OF THE SEVERAL VIEWS OF THE DRAWINGS

FIG. 1 is a block diagram to show an example of an arrangement of amobile node in a first embodiment of the present invention;

FIG. 2 is a schematical drawing to show an example of a networkarrangement in the first embodiment of the invention;

FIG. 3A is a schematical drawing to show general features of a networkflow profile in the first embodiment of the invention;

FIG. 3B is a drawing, schematically showing general features of flowcontrol information in the first embodiment of the invention;

FIG. 4 is a flowchart, showing an example of operation of a profileprocessor that receives a trigger to indicate the change of a connectionpoint of a mobile node, in the first embodiment of the invention;

FIG. 5 is a drawing to show an example of format of a binding updatemessage in the first embodiment of the invention;

FIG. 6 is a schematical drawing to show an example of a networkarrangement in a second embodiment of the invention;

FIG. 7 is a block diagram to show an example of an arrangement of amobile node in the second embodiment of the invention;

FIG. 8 is a block diagram to show an example of an arrangement of amobile node in the second embodiment of the invention;

FIG. 9 is a block diagram to show an example of an arrangement of a homeagent in the second embodiment of the invention;

FIG. 10 is a flowchart to show an example of judgment processing of amobile node when connection changeover in its own interface is detectedin the second embodiment of the invention;

FIG. 11 is a flowchart to show an example of judgment processing of amobile node when a flow type flag added to the flow information isconfirmed in the second embodiment of the invention; and

FIG. 12 is a drawing to show an example of format of a flow confirmationmessage using a binding update message in the second embodiment of theinvention.

DETAILED DESCRIPTION

Description will be given below on the best aspect of the invention byreferring to the attached drawings. In the following, detaileddescription may be given on specific number, time, or structure, andprotocol name and other parameters, but specific conditions as used inthe present specification are merely given to facilitate the explanationof the invention, and these are not used for limiting the scope of thepresent invention.

In the present specification, a method is disclosed, which is used by amobile node (MN) having a plurality of interfaces to transmit andreceive a traffic flow via an interface as appropriate.

To facilitate explanation, a term “network flow profile” is used below.This network flow profile represents a filter rule that is defined by aservice operator of the mobile node for indicating a method to forward atraffic flow of the mobile node (i.e., a method, by which a traffic flowof a mobile node is forwarded from the mobile node (or to a mobilenode)).

Further, a term “domain limited flow (domain limited flow)” is used toexplain relation between a specific flow and a specific network when thespecific flow is transmitted via the specific network. This domainlimited flow indicates a traffic flow that a service provider musttransmit only within a trusted network (a reliable network), to which aservice provider can trust. The trusted network is a network that isapproved by the service provider. For instance, it is a network, forwhich security is guaranteed. In the present specification, the relationbetween the domain limited flow and the trusted network is used as anexample, to represent the relation between the specific flow and thenetwork to transmit the flow, while the relation between these two isnot limited to this. That is to say, in case a network suitable for thetransmission of a specific flow is decided, the reason to associatethese two does come into question. In the description as given below, atrusted flow list 310 and a trusted access list 311 are used as examplesthat are associated by common reasons of trust.

The trusted network is a network that is directly managed by the serviceprovider, for instance. Further, a network managed by an operator thathas an established security associated with the service provider, may beincluded. In the specification hereinafter, a network that does not havean established trust relation with the service provider (i.e., a networkthat the service provider does not trust (rely)) may be referred to as“non-trusted network (non-reliable network)”.

Reasons why the domain limited flow must be transmitted only within thetrusted network are, for instance: to avoid the decrease of security ofoutflow of the flow to outside the trusted network, or to evade thedecline of QoS (Quality of Service), while there may be any otherreason, and the present invention is not limited whatever the reasonsmay be.

The First Embodiment

First, description will be given on the first embodiment of theinvention. FIG. 1 shows an example of an arrangement of a mobile node inthe first embodiment of the invention. A mobile node (MN) 10 has one ormore network interfaces 11, a profile processor 12, and a flow cache 13.A network flow profile 13 a and flow control information 13 b are storedin the flow cache 13.

The network interface 11 is a functional block that contains hardwareand software necessary when the mobile node 10 performs communication toand from another node via an arbitrary communication medium. If theterms known in the related technical field are used, the networkinterface 11 represents communication component such as a layer 1(physical layer) and a layer 2 (data-link layer), a firmware, a driver,a communication protocol, etc. In FIG. 1, only one network interface 11is shown, while MN 10 may have a plurality of network interfaces 11.

Information relating to the transmission of trigger/packet is given andtaken between the network interface 11 and the profile processor 12 viaa signal/data path 140.

The profile processor 12 has the function to check and update thenetwork flow profile 13 a. When the profile processor 12 receives atrigger from the network interface 11, the checking function of theprofile processor 12 comes into effect. As the trigger, there may be acase where one or more network interfaces 11 have changed the connectionpoint or a case where aggravation of network status is detected, but itis not limited to these cases.

The checking function of the profile processor 12 is to decide whetherthe interface that changed connection, has forwarded the domain limitedflow to outside of the trusted access network of the service provider ornot (or, whether it falls under the status to forward the domain limitedflow or not).

In case it is detected that the domain limited flow has been transmittedto outside of the trusted access network, the updating function of theprofile processor 12 comes into effect, and the network flow profile 13a is updated. By this updating, the network flow profile 13 a relatingto the domain limited flow is updated, and it can be set so that thedomain limited flow does not flow out from the trusted access network ofthe service provider.

Between the profile processor 12 and the flow cache 13, informationrelating to transmission of profile/information is given and taken viathe signal/data path 141.

The flow cache 13 can store the information relating to the trafficflow. For instance, the network flow profile 13 can be stored in theflow cache 13. The network flow profile 13 a is a filter rule toinstruct a method to forward a traffic flow of the mobile node 10. Thenetwork flow profile 13 a is defined by the service operator of themobile node 10, and it is offered to the mobile node 10 from the networkat an arbitrary timing. The network flow profile 13 a may have one ormore filter rules.

Further, the flow control information 13 b as introduced in the presentinvention can be stored in the flow cache 13. As described above, whenit is detected that the domain limited flow has been transmitted tooutside of the trusted access network of the service provider, thenetwork flow profile 13 a is updated. The flow control information 13 bcontains a type of information that is needed when the network flowprofile 13 a is to be updated. An example of the flow controlinformation 13 b may be a trusted flow list 310 or a trusted access list311 (as to be described later) offered from a home agent on the networkside.

FIG. 2 shows an example of a network arrangement in the first embodimentof the invention. In the network arrangement shown in FIG. 2, a homeagent (HA) 22, a cellular network (trusted cellular network) 200, and aWLAN (trusted WLAN) 210 make up together a trusted network. This trustednetwork may be owned by a single service provider or may be owned by aplurality of providers that are in trust relation with each other.

HA 22 and the cellular network 200 are connected to each other via thesignal/data path 210. Also, HA 22 and WLAN 201 are connected to eachother via the signal/data path 211.

Further, in this network arrangement, there is a non-trusted WLAN 202 (aWLAN not belonging to the trusted network) formed by the cellularnetwork 200 and the WLAN 201.

Also, as shown in FIG. 2, there is a mobile node (MN) 10 that owns twonetwork interfaces, i.e., a cellular interface (IF 1) 110 and a WLANinterface (IF 2) 111. In the initial status, it is supposed that thecellular interface 110 and the WLAN interface 111 are connected to thecellular network 200 and WLAN 201 respectively. Therefore, the cellularinterface 110 acquires CoA (cellular trusted CoA (Trusted-CoA-Cellular)from the cellular network 200 and acquired a WLAN trusted CoA(Trusted-CoA-WLAN) from the WLAN network 201.

It is supposed here that the cellular trusted CoA corresponds to abinding identifier (BID 1) and the WLAN trusted CoA corresponds to abinding identifier (BID 2). MN 10 registers a binding at HA 22—i.e., abinding, in which both the cellular trusted CoA added with BID 1 to HoA(home address) of MN 10 and the WLAN trusted CoA added with BID 2 areassociated. Also, it is supposed that MN 10 and HA 22 have the domainlimited flow that passes via BID 2. In the description as given below,it is assumed that the cellular interface 110 uses CoA, while thecellular interface 110 may acquire and use HoA (and not CoA) from thecellular network 200. In this case, location information that MN 10registers at HA 22, indicates that two addresses, i.e., HoA and CoA(assigned to the WLAN interface 111) as transfer destinations, and BID 1corresponds to the location information to indicate HoA.

According to the present invention, when the mobile node moves to thenon-trusted network, the mobile node must update the network flowprofile 13 a so that the path of the domain limited flow can bemaintained within the trusted network. Therefore, it is necessary thatthe mobile node not only receives and maintains the network flow profilebut also must have “flow control information (FCI)” to update the routeof the domain limited flow.

Next, description will be given on format of the network flow profile 13a and the flow control information 13 b. FIG. 3A schematically showsgeneral features of the network flow profile in the first embodiment ofthe invention. The network flow profile 13 a has a network flow profiletype 301 and a flow policy 302.

The network flow profile type 301 indicates the intended purpose of thenetwork flow profile. The intended purpose of the network flow profile13 a may include routing control of the domain limited flow or accesscontrol to the network, but it is not limited to these.

By the flow policy 302 that is present in the network flow profile 13 a,HA 22 can define one or more policies to MN 10. The flow policy 302 maybe a routing policy to be set by HA 22 for the purpose of instructing amethod, by which MN 10 forwards the domain limited flow, or may be alist to indicate the network accessible by MN 10 (e.g., CSG (ClosedSubscriber Group)), but it is not limited to these.

For instance, HA 22 sets a flow policy to instruct MN 10 to forward adata packet ((e.g., a data packet of “i mode” (registered trademark) ofMN 10) that should be normally transmitted via the cellular network) viathe WLAN trusted CoA (BID 2). It is assumed that this data packet has aflow identification information FID 1.

FIG. 3B schematically shows general features of flow control informationin the first embodiment of the invention. The trusted flow list 310 andthe trusted access list 311 are included in the flow control information13 b.

By the trusted flow list 310, HA 22 can instruct MN 10 as to which flowof MN 10 should be forwarded via the trusted access network. Forinstance, HA 22 adds an entry to the trusted flow list 310, i.e., anentry that notifies MN 10 that a data packet (FID 1) of “i mode”(registered trademark) can be transmitted only within the trusted accessnetwork. Here, FID (flow ID) is used as information to designate theflow, but any type of information may be used, by which it is possibleto identify the communication performed by MN 10. For instance, theseinclude: address of the correspondent, protocol number, session ID,connection ID, etc. In particular, when it is connected to 3GPP network,an ID to identify connection with PDN gateway (PDN connection ID, APN)is used, for instance.

Further, by the trusted access list 311, HA 22 can notify MN 10 as towhich of the access networks is classified as the trusted network of theservice operator. For instance, HA 22 describes network identificationinformation (network ID) to specify the trusted access network of theservice operator in the trusted access list 311. Specifically, byreferring to the trusted access list 311, it is possible to specify thetrusted network of the service provider.

The layout of the network flow profile 13 a and the flow controlinformation 13 b may be generated by XML (eXtensible Markup Language)scheme. Also, other programming language such as JavaScript (registeredtrademark) may be used.

It is supposed here that MN 10 performs transmission and receiving ofthe domain limited flow by using the WLAN interface 111 connected to theWLAN 201. For instance, it is supposed that MN 10 requests “i mode”(registered trademark) service that is a domain limited flow, from theservice provider. A data packet (FID 1) of “i mode” (registeredtrademark) must be forwarded only via the trusted network, and HA 22sets the network flow profile 13 a relating to MN 10 so that the datapacket (FID 1) is transmitted via the WLAN trusted CoA (BID 2).

On the other hand, in case MN 10 is moving between networks that aredifferent from each other, the WLAN interface 111 of MN 10 may beshifted from communication area of the WLAN (trusted WLAN) 201 tocommunication area of another WLAN (non-trusted WLAN) 202. By the changeof the connection point at MN, a trigger is transmitted from the networkinterface 11 to the profile processor 12.

FIG. 4 is a flowchart to show an example of operation of the profileprocessor that receives a trigger to indicate the change of theconnection point of the mobile node, in the first embodiment of theinvention.

In FIG. 4, when the profile processor 12 receives the trigger from thenetwork interface 11 (Step S40), the network flow profile 13 a and theflow control information 13 b are retrieved from the flow cache 13relating to MN 10 (Step S41). In the trigger received, it is indicatedwhich network interface 11 of MN 10 is moving (in the connectionchangeover operation).

Then, by using information acquired from the trigger or from informationacquired from the cache 13, the profile processor 12 checks whether anactive domain limited flow is present or not that relates to theinterface in moving of MN 10 (Step S42).

In case an active domain limited flow relating to the interface inmoving is not present, the profile processor 12 requests a mobile IPstack within MN 10 to carry out binding operation to HA 22 in relationto a new CoA (WLAN-non-trusted CoA) of MN 10, and a BU is generated(Step S47).

On the other hand, the domain limited flow is transmitted and receivedby using the WLAN interface 111 connected to the WLAN 201. In case theconnection of the WLAN interface 111 is changed over from the WLAN(trusted WLAN) 201 to the WLAN (non-trusted WLAN) 202, the profileprocessor 12 detects the presence of the domain limited flow relating tothe interface in moving of MN 10.

In this case, the profile processor 12 requests that networkidentification information (network ID) of the access network, to whichthe interface in moving from the network interface is connected (StepS43), should be provided. According to the network identificationinformation of the access network, the profile processor 12 performs theprocessing to specify whether the interface in moving is still presentwithin the trusted network of the service provider or not (Step S44).

As a method to specify whether the interface in moving is present or notwithin the trusted network of the service provider, there is a method tocompare the network identification information of a new access networkwith information in the trusted access list 311, but it is not limitedto this.

In case the interface in moving is still present within the trustednetwork of the service provider, the profile processor 12 requests themobile IP stack within MN 10 to carry out binding operation to HA 22 inrelation to a new CoA (a WLAN trusted CoA) of MN 10, and BU is generated(Step S47).

Also, in case MN 10 changes over the connection of the WLAN interface111 from the WLAN (trusted WLAN) 201 to the WLAN (non-trusted WLAN) 202as described above, the profile processor 12 detects that the WLANinterface 111 after the connection changeover is not present within thetrusted network of the service provider. In this case, therefore, theprofile processor 12 updates the network flow profile 13 a of MN 10 byusing the flow control information 13 b (Step S45).

For instance, according to the trusted flow list 310 included in theflow control information 13 b, the profile processor 12 comprehends thatthe data packet (FID 1) of “i mode” (registered trademark) associatedwith BID 2 must be forwarded via the trusted access network. Also, fromthe trusted access list 311 included in the flow control information 13b, the profile processor 12 confirms that the trusted access network asusable is a cellular network 200 using the cellular trusted CoA (BID 1).As a result, the profile processor 12 performs updating to change theroute of FID 1 from a route via BID 2 to a route via BID 1 within thenetwork flow profile 13 a of MN 10.

When the updating of the network flow profile 13 a of MN 10 iscompleted, the profile processor 12 requests the mobile IP stack withinMN 10 to carry out the binding operation to HA 22 relating to a new CoA(a WLAN-non-trusted CoA) of MN 10, and a BU is generated (Step S46).

In this binding operation, the network flow profile 13 a of MN 10 asupdated is further placed into payload of the BU, and it is indicated bya BU flag that the network profile 13 a of MN 10 has been changedaccording to the flow control information 13 b of MN 10 as offered to HA22.

In the BU generating processing in both of Step S46 and Step S47, themobile IP stack within MN 10 transfers the BU to the network interface11 and the BU is transmitted to HA 22 (Step S48).

In another embodiment, it may be so arranged that, in case it is decidedthat the interface in moving of MN 10 is still present in the trustednetwork of the service provider, the profile processor 12 requests themobile IP stack in MN 10 to generate a BU relating to the bindingoperation to HA 22 so that an additional flag is added to the BU. Thisflag (B flag 53 as to be described later) is still present within thetrusted network even when the domain limited flow relating to theinterface in moving of MN 10 is present, and this indicates that HA 22does not have to check as to whether it is necessary to re-set the routeof the domain limited flow or not. By this method, it is possible toalleviate the processing by HA 22 on the network flow profile 13 a andthe flow control information 13 b relating to MN 10 when the interfaceof MN 10 moves within the trusted access network.

FIG. 5 shows an example of format of a binding update message in thefirst embodiment of the invention. The binding update message as shownin FIG. 5 has a binding update header 51, a V flag 52, a B flag 53, anda network flow profile region 54.

In the binding update header 51, information necessary for notifying anew care-of address to the other node by the mobile node is included.The V flag 52 is to notify to HA 22 that the network flow profile 13 aof MN 10 has been changed according to the flow control information 13 bof MN 10. Further, by the B flag 53, HA 22 can comprehend that there isno need to carry out re-routing of the domain limited flow because MN 10is moving within the trusted network.

In the network flow profile region 54, the updated network flow profile13 a of MN 10 is included. The V flag 52 and the B flag 53 may belocated at any location, and these may be realized as a flag within thebinding update header 51 or may be realized as a flag within a region tonotify the network flow profile 54. The network flow profile region 54may be disposed at any location as desired, and it may be realized as anoperation of an arbitrary header, or it may be realized by payload. Byreferring to the updated network flow profile 13 a included in thenetwork flow profile region 54, HA 22 can verify whether the change byMN 10 is correct or not.

When a BU 50 is received from MN 10, HA 22 decides necessary operationto be executed through the processing of the BU 50. For instance, HA 22recognizes that the updated network flow profile 13 a of MN 10 is storedin the network flow profile region 54. In this case, HA 22 verifieswhether MN 10 has correctly updated the network flow profile 13 a ornot. As the method of verification by HA 22, there is a method toconfirm that all domain limited flows are transmitted within the trustedaccess network by referring to the network flow profile 13 a, but it isnot limited to this.

When the verification relating to the updating of the network flowprofile 13 a by MN 10 has been completed, HA 22 replaces the networkflow profile 13 a relating to MN 10 as stored in HA 22 itself by anetwork flow profile of MN 10 as forwarded through the updating of theBU 50 (i.e., the network flow profile 13 a as included within thenetwork flow profile region 54).

There may be a case where the V flag 52 is not set in the BU 50 receivedby HA 22 and the network flow profile 13 a of MN 10 as updated may beincluded in the network flow profile region 54. In such case, it isdecided that MN 10 has changed the network flow profile 13 a withoutreferring to the flow control information 13 b, and it is desirable thatHA 22 rejects the BU 50.

Also, the B flag 53 may be set in the BU 50 received by HA 22. Becausethe B flag 53 is set, HA 22 can immediately comprehend that MN 10 hasmoved in the trusted network and there is no need to change the networkflow profile 13 a.

According to the present invention, the flow control information 13 b ofMN 10 is updated by HA 22 in case MN 10 changes the connection point, orin case MN 10 requests a new domain limited service, or in case MN 10has completed the domain limited service. Here, HA 22 updates adequateentry included in the flow control information such as the trusted flowlist 310 of the domain limited flow or the trusted access list 311 ofthe trusted network.

If HA 22 comprehends that MN 10 is moving with the trusted accessnetwork, it is possible to select so that the updated flow controlinformation 13 b may not be transmitted to MN 10. Because the basicrules of the service provider are to ensure that the domain limited flowcan be transmitted only within the trusted network, MN 10 moving withinthe trusted access network does not behave against the rules. By thisselective behavior, when HA 22 has many subscribers using the domainlimited service, the network resources of HA 22 can be more efficientlyused.

Also, by using the group identification information, it is possible toidentify a plurality of domain limited flows of the mobile node. Forinstance, MN 10 is subscribed in three domain limited services that havedifferent types of flow identification information, i.e., FID 1, FID 2and FID 3, and these three domain limited flows are supposed to betransmitted via the same BID of MN 10.

HA 22 can classify these three domain limited flows according to groupidentification information called trusted group identification (TGID)information (reliable group identification). Then, HA 22 adds TGID tothe network flow profile 13 a and the flow control information 13 b tobe used by MN 10.

By using TGID, MN 10 can update all related domain limited flows (domainlimited flows belonging to the same TGID) by simply transmitting one BU,and an overhead due to the BU can be alleviated. Also, MN 10 and HA 22can make arrangement as to which of a plurality of TGIDs various typesof the domain limited flows should be classified. In so doing, MN 10 canflexibly decide the method to classify the domain limited flows.

As described above, according to the first embodiment of the invention,the mobile node can recognize the domain limited flows and the trustednetwork, and the mobile node itself can perform control so that thedomain limited flows can be transmitted and received only within thetrusted network. As a result, it is possible to select the networksuitable for a specific flow, to change and notify the network flowprofile, and to accomplish efficient flow transfer by the mobile node.

The Second Embodiment

Next, description will be given on the second embodiment of theinvention. FIG. 6 is a schematical drawing to show an example of anetwork arrangement in the second embodiment of the invention. In FIG.6, MN 610 has two interfaces, i.e., IF 1 and IF 2. IF 1 is connected toa network 620, and IF 2 is connected to a network 630. IF 1 and IF 2 canchange the network to be connected according to the moving of MN 610,and mobile management is controlled by a mobile IP using HA 640.

To MN 610, flow information is given from HA 640. In the flowinformation, an interface to be used for transmission and receiving isspecified to the flows that are given and taken between MN 610 and thecorrespondent. For instance, when flow information notified from HA 640is present on a flow that MN 610 is going to transmit, MN 610 transmitsa packet by using the interface as specified by this flow information.According to the second embodiment of the invention, as shown in FIG. 7,it is assumed that MN 610 has acquired flow information to specify theuse of BID 1 (IF 1) to FID 1 (flow 1) (i.e., flow informationcorresponding to the network flow profile 13 a in the first embodimentof the invention). Here, FID (flow ID) is used as information to specifythe flow, while any type of information may be used, which can identifythe communication performed by MN 610. For instance, these types ofinformation may include: address of the correspondent, protocol number,session ID, connection ID, etc. In particular, when it is connected tothe 3GPP network, an ID to identify the connection with the PDN gateway(PDN connection ID, APN) or the like is used.

FIG. 8 shows an example of an arrangement of a mobile node in the secondembodiment of the invention. MN 610 as shown in FIG. 8 has twointerfaces 801 and 802, a transmitting unit 803, a receiving unit 804, ahandover detecting unit 805, a flow information management unit 806, anetwork status monitoring unit 807, a flow information holding unit 808,a BU message generating unit 809, a BA message processing unit 810, apacket transfer unit 811, and a registered location information holdingunit 812.

The presence of the interfaces 801 and 802 indicates that MN 610 has twointerfaces. The two interfaces 801 and 802 correspond to two interfacesof IF 1 and IF 2 in FIG. 6 respectively. The transmitting unit 803 andthe receiving unit 804 have the functions to transmit and receivepackets via the interfaces 801 and 802 respectively.

The handover detecting unit 805 has the functions to predict that thehandover may be carried out at the interface 801 or the interface 802 orto detect generation of handover, and to notify the information relatingto the interface concerned to the flow information management unit 806.

The flow information management unit 806 has the function to decide, byreferring to the information in the flow information holding unit 808,as to whether there is a flow or not, in which the use of the interfaceconcerned is specified or not, and further, as to whether the flow is tobe transmitted and received via another interface when notification isreceived from the handover detecting unit 805 or from the network statusmonitoring unit 807, as to whether the interface 801 or the interface802 is going to perform the handover, and notification on status wherethe handover is actually carried out, and further, that the status ofthe network is being aggravated.

For instance, in case the detection of the handover relating to theinterface 801 has been notified from the handover detecting unit 805,the flow information management unit 806 identifies that a flow ispresent, which is specified to use the interface 801, and decides thatit should be confirmed as to whether another interface (interface 802)different from the interface 801 as specified to this flow can be usedor not. Then, the flow information management unit 806 instructs the BUmessage generating unit 809 to generate a flow confirmation message andto transmit it via the interface 802. In the flow confirmation message,information to specify the flow (e.g., flow ID) and information tospecify the interface (BID) are placed. For instance, a message for flowconfirmation is generated, which is to confirm whether IF 2 (BID 2) canbe used or not for transmission and receiving of the flow 1. Even incase there is no interface specified to the flow, it may be decided thatit should be confirmed as to whether another interface can be used forthe flow or not. As the information to be included in the message forflow confirmation, the information to identify the network, to which theinterface is connected, may be included instead of the information tospecify the interface (BID). For instance, a prefix or an address usedin the network, or access technique type, access network identifier(e.g., SSID of WLAN), etc., may be used.

In case the handover relating to the interface 801 is detected prior tothe starting of actual handover processing, i.e., it is detected thatthe interface 801 is very likely to start the handover (link goingdown), the interface 801 in connecting state may be used as theinterface to be used for the transmission of the message for flowconfirmation. In case it is detected that the interface 801 innon-connecting state is very likely to be connected to the network (linkgoing up), the interface 802 in connecting state may be used. Or, themessage for flow confirmation may be transmitted immediately after thecompletion of the handover by the interface 801.

The network status monitoring unit 807 has the function to monitor thenetwork status and to notify the information on the interface influencedby aggravation of network status to the flow information management unit806 when it is predicted or detected that the network status is beingaggravated. By the network status monitoring unit 807, it is possible toreset the flow route by the network status monitoring unit 807—not onlyat the time of handover of the interface but also when the networkstatus is aggravated. For instance, the network status monitoring unit807 may decide that transmission and receiving of the flow should bechanged over to another interface (i.e., handover and/or moving of theflow should be carried out) when it is decided that the load of theinterface in use or the load of the network connected is too high, orcommunication quality suitable for the flow cannot be maintained (due todelay, or generation of jitter), and further, that conditions such ashigh cost for communication cannot be met. Or, even when it is changedfrom the state where only IF 1 is connected to a state where both IF 1and IF 2 are connected and it is decided that IF 2 is regarded as moresuitable than IF 1, it may be decided that the flow, for whichcommunication has been performed by using IF 1, should be changed to IF2.

The flow information holding unit 808 has the function to maintaininformation to specify the use of a specific interface to a certainflow, or information to indicate whether or not the flow can betransmitted or received via the other interface or not (or informationto specify the other interface that can transmit and receive the flow).The information in the flow information holding unit 808 is referredwhen the message for flow confirmation is generated by the flowinformation management unit 806.

The BU message generating unit 809 receives an instruction of the flowinformation management unit 806 and generates a BU message including thedelivered flow ID and BID. This BU message has an intended purpose as amessage for flow confirmation to confirm to the home agent as to whetherthe flow ID included in the BU message can be transmitted or received byan interface, to which BID included in the BU message is assigned.

The BA message processing unit 810 has the function to perform theprocessing relating to a BA message received from HA (message for flowconfirmation) as a response to the transmitted BU message (message forflow confirmation response) and to instruct the flow information holdingunit 808 to hold the notified flow information. In the flow informationnotified from HA, the information to indicate whether a certain flow canbe transmitted or received via the other interface or not as specifiedin the existing flow information (i.e., whether or not the flow ID isincluded in the BU message can be transmitted or received via aninterface, to which BID included in the BU message is assigned).

The packet transfer unit 811 has the function to control packet transferand can specify the interface to be used for transmission of a certainflow. When it is notified in the message for flow confirmation responsethat a certain flow can be transmitted and received via anotherinterface, the packet transfer unit 811 refers to a new flow informationwhich is the result of confirmation by the message for flowconfirmation, and selects another interface as the interface to be usedfor transmission of the flow (i.e., the interface allowed by the flowinformation), and transfers the packet.

The registered location information holding unit 812 has the function tomaintain the information relating to the binding with CoA (or BID) andHoA, or information relating to the node where the binding isregistered.

FIG. 12 shows an example of format of the message for flow confirmationusing a binding update message in the second embodiment of theinvention. As shown in FIG. 12, the message for flow confirmation can berealized by mobility option (flow confirmation option) in the mobilityheader. Flow ID and BID are placed in the flow confirmation option.

The message for flow confirmation can be realized by an arbitrary methodand in an arbitrary format. For instance, the message for flowconfirmation may be realized by using a flow ID option used when MNnotifies the flow information to HA. Also, as the message for flowconfirmation, a message may be used, by which HA notifies flowinformation to specify CoA to be used as transfer destination (i.e., amessage to notify the flow information to HA from MN) instead of a BUmessage when MN registers a plurality of CoA's to HA, or aspecial-purpose message for flow confirmation different from othermessage or network information requesting message to information servermay be used.

FIG. 10 shows an example of judgment processing of MN when connectionchangeover (handover) is detected at its own interface in the secondembodiment of the invention.

In FIG. 10, when the handover on the interface (IF 1) of MN is detectedat the handover detecting unit 805 (Step S1001), it is confirmed whetherthere is a flow or not, for which the use of IF 1 is specified (StepS1002), and if such flow information is present, it is further confirmedwhether or not it is a flow where it is wanted to suppress the influencefrom packet loss, delay or jitter as much as possible, i.e., whethertransmission and receiving of the flow should be changed over to anotherinterface (IF 2) or not (Step S1003).

As a result, if judgment is made that transmission and receiving shouldbe changed to another interface (IF 2), it is confirmed whether thelocation information relating to said another interface (IF 2) isalready registered at HA or not (Step S1004). If the locationinformation is already registered, a message for flow confirmation istransmitted to confirm whether or not it is a flow that can betransmitted or received by using another interface (IF 2) (Step S1005).If the location information is not yet registered, a BU message toregister the location information is transmitted (Step S1006), and themessage for flow confirmation is transmitted (Step S1005). The messagefor flow confirmation to be transmitted in Step S1005 and the BU messageto be transmitted in Step S1006 may be put together, and these may betransmitted as a single BU message.

In case it is decided in Step S1002 that a flow where the use of IF 1 isspecified is not present, or in case it is decided in Step S1003 that itshould not be changed over to another interface (IF 2), the processingis completed without performing a specific processing (Step S1099).

To each of the flow information as held at the flow information holdingunit 808, flow type may be added and placed under management. In thiscase, the flow information is maintained in the flow information holdingunit 808, and flow type of each flow information can be held.

This flow type is a type of information in which HA is set in the flowinformation to be transmitted to MN. For instance, there are two types.In the first type, a flow is associated with the network where theinterface is connected. Specifically, in the first type, when thehandover is performed and the connected network has been changed over,the flow specified in the flow information is a flow that may not betransmitted or received by the network after the connection changeover.The flow of this first type has the possibility that the flowinformation may be changed due to the change of CoA. Hereinafter, thisis referred to as “CoA-bind flow”.

On the other hand, in the second type, the flow is associated with theinterface. Specifically, the flow of the second type is a flow, in whichthe specified interface cannot be changed even when the connectednetwork is changed over by the handover. The flow of the second type isthe flow information that can be used as it is even when CoA is changed.Hereinafter, this is referred to as “BID-bind flow”.

This difference of the flow type can be expressed by setting a flag (aflow type flag) to each type of flow information in the flow informationnotifying message to be transmitted from HA to MN. For instance, when aflow type flag is set, it can be decided as a CoA-bind flow. When theflow type flag is not set, it is decided as a BID-bind flow.

When a notification that a change has occurred in the status of theinterface is received from the handover detecting unit 805 or from thenetwork status monitoring unit 807, the flow information management unit806 confirms the presence of the flow information, in which the use ofthe interface is specified. If such flow information is present, theflow information management unit 806 confirms the flow type flag of theflow information.

When the flow type flag of the flow information is set (i.e., the caseof the CoA-bind flow), it is found that there is possibility that thisflow cannot be transmitted and received, depending on the network to beconnected. Then, in the stage prior to the completion of the handover inthe state where the handover is very likely to take place not only forsuppressing the influence by the cause such as packet loss during thehandover but also for preventing the impossibility to transmit andreceive the packet after the handover, it can be decided that MN canchange over the interface to be used for this flow.

On the other hand, in case the flow type flag of this flow informationis not set (i.e., the case of the BID-bind flow), it is found that thisflow is a flow that is to be transmitted and received by using theinterface without depending on the connected network. As a result, MNcan decide that there is no need to change over the interface to be usedto this flow.

FIG. 11 is a flowchart to show an example of judgment processing of MNwhen the flow type flag added to the flow information is confirmed inthe second embodiment of the invention.

In FIG. 11, in case the handover is detected at the interface (IF 1) ofMN at the handover detecting unit 805 (Step S1101), it is confirmedwhether there is a flow or not where the use of IF 1 is specified (StepS1102). If such flow information is present, it is confirmed whether theflow type flag of this flow is set or not (whether it is the CoA-bindflow or not) (Step S1103). If it is the CoA-bind flow, it is furtherdecided as to whether it is a flow or not, for which the influences frompacket loss, delay or jitter should be suppressed as much as possible,i.e., whether transmission and receiving of this flow should be changedover to the other interface (IF 2) or not (Step S1104).

As a result, if it is decided that the flow should be transmitted andreceived via the other interface (IF 2), it is confirmed whether thelocation information relating to the other interface (IF 2) is alreadyregistered at HA or not (Step S1105). In case the location informationis already registered, a message is transmitted for flow confirmation toconfirm as to whether it can be transmitted and received via the otherinterface (IF 2) (Step S1106). In case the location information is notregistered, a BU message to register the location information istransmitted (Step S1107), and the message for flow confirmation istransmitted (Step S1106). The message for flow confirmation to betransmitted in Step S1106 and the BU message to be transmitted in StepS1107 may be put together and may be sent as a single BU message.

In case it is decided in Step S1102 that there is no flow where the useof IF 1 is specified, or in case the flow flag type is the BID-bind flowin Step S1103, or in case it is decided in Step S1104 that it should notbe changed over to the other interface (IF 2), the processing isterminated without performing specific processing (Step S1199).

In case the flow information where a plurality of BID's are associatedwith one flow (e.g., BID 1 and BID 2 are associated with the flow 1) isnotified from HA, and if MN decides that the flow 1, in whichtransmission and receiving are performed by using IF 1 as indicated byBID 1, should be changed over to the other IF due to the reason such asthe handover, MN can decide that IF 2 as indicated by BID 2 can be usedas the interface of the changeover destination.

In this case, if the connecting status or network status of IF 2 asindicated by BID 2 is frequently changed, or in case some change occursto BID 2 as the second IF even when BID 2 is added as the second IF, HAmust notify MN each time. For this reason, if such status occurs, MNtransmits a message for flow confirmation when it is necessary to knowthe presence of the second IF—and not receiving the notification fromHA, and it is possible to change over the operation to confirm whetherIF 2 can be used or not as the interface for transmission and receivingof the flow 1. In this changeover of the operation, the suspension ofnotification of the flow information may be requested to HA based on thejudgment on HA side, and the transmission of the message for flowconfirmation is necessary from the side of MN 610 to MN 610 based on thejudgment of HA.

FIG. 9 shows an example of an arrangement of a home agent in the secondembodiment of the invention. HA 640 shown in FIG. 9 has an interface901, a transmitting unit 902, a receiving unit 903, a BU messageprocessing unit 904, a flow information control unit 905, a BA messagegenerating unit 906, and a MN management information holding unit 907.

The interface 901 is an interface owned by HA 640. The transmitting unit902 and the receiving unit 903 have the functions to transmit andreceive the packets via the interface 901.

The BU message processing unit 904 has the function to performprocessing of a BU message, which plays a role as a message for flowconfirmation and received from MN. For instance, in case the BU messagereceived from MN has a role as a message for flow confirmation, the BUmessage processing unit 904 delivers a flow ID and a BID included in theBU message to the flow information control unit 905 and instructs todecide whether it is possible or not to transmit and receive the flowindicated by the flow ID via the interface of MN as indicated by theBID.

The flow information control unit 905 has the function to carry outcontrol relating to the flow information to be notified to MN under themanagement of HA, and to decide whether it is possible or not totransmit and receive the flow indicated by the flow ID via the interfaceinstructed by the BID according to the flow ID and the BID as notifiedfrom MN.

When it is decided that the flow indicated by the flow ID can betransmitted and received via the interface indicated by the BID, theflow information control unit 905 instructs a BA message generating unit906 to generate a BA message including the information to indicate thatit can be transmitted and received. On the other hand, if it is decidedthat transmission and receiving are not possible, the flow informationcontrol unit 905 instructs the BA message generating unit 906 togenerate the BA message including the information to indicate thattransmission and receiving are not allowed.

When it is decided that transmission and receiving are not allowable viathe interface indicated by the BID as notified from MN, and iftransmission and receiving are allowable via the other interface of MN(e.g., via a third interface other than IF 1 or IF 2), for the purposeof notifying MN that the interface can be used, an instruction may begiven in a BA message to include a BID to indicate the interface.

The judgment as to whether a certain flow can be transmitted or receivedvia the interface as indicated from the BID or not can be made byreferring to the location information on MN 610 maintained by themanagement information holding unit 907, and by identifying the networkconnected from the prefix of CoA of MN, to which the BID is associated,and further, by checking whether the transmission and receiving of theflow notified on the network are allowable or not.

Even when the BU message from MN 610 (i.e., a message for flowconfirmation) is not received, the flow information control unit 905 caninstruct the BA message generating unit 906 to generate a flowinformation notifying message to notify the changed flow information toMN.

The BA message generating unit 906 has the function to generate a BAmessage (a flow confirmation response message) including the informationto indicate whether it is possible or not to transmit and receive theflow indicated by a certain flow ID via the interface as indicated by acertain BID according to an instruction from the flow informationcontrol unit 905.

The BU message processing unit 904 and the BA message generating unit906 have also the functions to perform processing of the BU messagerelating to a normal mobile IP received from MN or to generate the BAmessage. By keeping the location information of MN under the managementof the MN management information holding unit 907, the home agentfunctions can be accomplished.

As described above, according to the second embodiment of the invention,with regard to the flow 1, which has been transmitting and receiving thepacket via IF 1 based on the flow information as notified from the homeagent, it is decided whether or not the flow 1 should be transmitted andreceived via IF 2 when IF 1 of the mobile node carries out the handoverand after confirming whether the flow can be transmitted or not via thenetwork where IF 2 is connected, IF to be used can be changed over. As aresult, it is possible to reduce and alleviate the influence of packetloss, delay, or jitter that occurs during the handover when IF 1 carriesout the handover. Also, the mobile node can discriminate the flow whereflow information may be changed due to the change of CoA (i.e., CoA-bindflow) and a flow that can be used even when CoA is changed (BID-bindflow). Then, it is possible to select the flow that is influenced by thechange of CoA (CoA-bind flow) as an object of flow re-arrangement. Thefunction of HA 640 to hold the location information of MN 610 in thesecond embodiment of the invention may be accomplished by an informationserver that is present on the network.

The Third Embodiment

Description will be given now on the third embodiment of the invention.Major difference between the third embodiment and the second embodimentof the invention is as follows: In the second embodiment, a method isadopted to confirm whether it is possible or not to use a network thatis known to MN 610, for the transmission and the receiving of a certainflow. On the other hand, in the third embodiment, MN 610 notifies onlythe flow information and uses a method, according to which theinformation relating to the network as usable for the flow is acquired.In the third embodiment, as the information relating to the flow, anyarbitrary information, which can identify the communication performed byMN 610, can be used. These types of information include, for instance:flow ID, address of the correspondent, protocol number, session ID,connection ID, etc. In particular, when it is connected to 3GPP network,ID to identify the connection with PDN gateway (PDN connection ID, APN)can be used.

In the third embodiment of the present invention, MN 610 is connected toa network via one or more interfaces, and MN 610 transmits and receivesby itself. Or, the information relating to the flow to starttransmission and receiving is transmitted to a network informationmanagement server (HA 640 or an information server on the network), andthe information effective for the selection of the network suitable fortransmission and receiving of the flow is requested (access networkinformation). Here, the message to perform this request is referred toas an access network information requesting message. MN 610 transmitsthe access network information requesting message under the samejudgment criteria as the handover detecting unit 805 and the networkstatus monitoring unit 807 in the second embodiment of the invention.

For instance, when it is decided that the load of interface in use by acertain flow or the load of the connected network is too high, MN 610decides that an arbitrary flow using this interface should be moved tothe other network, and transmits the access network informationrequesting message including the information relating to this flow tothe network information management server. Upon receipt of the message,the network information management server selects a network suitable fortransmission and receiving of the notified flow, and transmits theinformation relating to this network to MN 610. On the other hand, MN610 performs handover to the other network or changes over the flow tothe interface connected to the other network.

Here, if it is assumed that MN 610 can be connected or it is beingconnected to a certain 3GPP network, and when it is decided that theflow under communication via this connection should be moved to theother network, the information on the other network usable by 3GPPinterface is included in the information that can be acquired from theaccess network information. When it is decided that the flow on the 3GPPnetwork side should be moved to the other network when MN 610 can beconnected to both of the 3GPP network and the non-3GPP network, theaccess network information acquired may include the information on thenetwork that can be used by the non-3GPP network. On the contrary, incase it is decided that the flow on the non-3GPP network side should bemoved to the other network, the acquired access network information mayinclude the information on the network that can be used by the 3GPPnetwork.

As another example, when MN 610 acquires access network informationrelating to a certain flow at an arbitrary timing in advance and thetransmission and receiving of the flow is started, or when the load ofthe interface that is transmitting and receiving this flow, isincreased, MN 610 may use the access network information alreadyacquired. For instance, the access network information relating to aspecific flow may be acquired immediately after the completion of accessauthentication is completed and communication can be performed, or theaccess network information relating to the flow may be acquired afterthe communication of a certain flow is started from the correspondent.

In the two examples as given above, it is assumed that information ofthe network actually connectable is acquired at the moment when theaccess network information is requested, while it may be assumed that itis the information effective for selection of network/interface evenwhen there may be change in the network environment thereafter,depending on the access network information acquired as to be describedbelow.

As the access network information to be acquired, there are, forinstance, an access technology type or the access network information,for which transmission and receiving of the notified flow is allowed.Also, there are, for instance, access technology type information mostsuitable for the notified flow, or information of a plurality of accesstechnology types arranged in the sequence of priority. Further, thereare, for instance, information on the most adequate access network tothe notified flow or information on a plurality of access networksarranged according to the sequence of priority. Cellular network, WiMAXnetwork, WLAN network, CSG cell, etc., are included in the accessnetwork.

As the access network information requesting message, any arbitrarymessage may be used. For instance, a message to notify the flowinformation for specifying CoA, which is used by HA as transferdestination (i.e., a message to notify the flow information from MN toHA) when the BU message of the mobile IP or MN registers a plurality ofCoA's to HA may be used, or a network information requesting message tothe information server may be used as a dedicated message. Further, arequest message and a response message to be used by ANDSF (AccessNetwork Discovery and Selection Function) may be used.

As described above, according to the third embodiment of the invention,MN 610 can use an adequate network as a network for transmitting andreceiving the flow by acquiring a network suitable for the flow bynotifying information relating to any arbitrary flow to the accessnetwork information management server, and it is possible to prevent thetransmission of the flow to an inadequate network.

It is also possible to use by combining operation and arrangement asdescribed in the first to the third embodiments of the invention asdescribed above. For instance, in the first embodiment, MN receives andmaintains flow control information from HA and checks whetherrearrangement of the flow is necessary or not or performs flow changeoperation by referring to this information as necessary, while it isalso possible to control so that the domain limited flow is transmittedwithin the trusted network by successively making inquiries to HA. Also,in the first embodiment, for instance, the information to indicatewhether the flow is a CoA-bind flow or not, may be offered via an RAmessage as the flow control information. In the present specification,description is given on a case where a certain interface of MN isconnected to the other network by handover, while this can be applied ona case where an interface in non-connecting status is connected to anetwork. Further, as a combination of the second embodiment with thethird embodiment of the invention, MN transmits the informationtransmitted and received by itself or the information relating to theflow to be transmitted and received to the network informationmanagement server together with the information relating to the networkthat is detected by itself and can be connected, and MN may request thata network suitable for transmitting and receiving the notified flowshould be selected from among these networks.

In the present specification, figures and descriptions are shown anddescribed by giving consideration so that the present invention will bethe most practical and preferred embodiment while those skilled in theart would obviously understand that various changes and modificationscan be made without departing from the spirit and the scope of theinvention on detailed designs and parameters relating to componentelements of each node as described above.

For instance, the parameters as described in the network flow profile 13a and the flow control information 13 b are not necessarily limited tothose described in the specification. The requirements on the flow ornetwork characteristics may be recorded in the network flow profile 13 aand the flow control information 13 b.

In the embodiments as described above, the network where the network inquestion and the network where the interface is connected are specifiedby using BID, while an ID to indicate CoA or connection destinationnetwork may be used instead of BID. Also, the information server tomanage and hold the flow information, or AAA server, or thecorrespondent may have the function that HA has.

Further, in the embodiments as given above, MN 10 notifies to HA 22 thatthe network flow profile 13 a is updated by referring to the flowcontrol information 13 b and by using a flag (V flag 52) in the BU,while nonce, secret number, cookie, etc., may be used instead of theflag in BU.

Each functional block used in the description of the embodiments of thepresent invention as given above can be realized as LSI (Large ScaleIntegration), typically represented by the integrated circuit. These maybe produced as one chip individually or may be designed as one chip toinclude a part or all. Here, it is referred to as LSI, while it may becalled IC, system LSI, super LSI, or ultra LSI, depending on the degreeof integration.

Also, the technique of integrated circuit is not limited only to LSI andit may be realized as a dedicated circuit or a general-purposeprocessor. FPGA (Field Programmable Gate Array), which can be programmedafter the manufacture of LSI, or a reconfigurable processor, in whichconnection or setting of circuit cell inside LSI can be reconfigured,may be used.

Further, with the progress of semiconductor technique or othertechniques derived from it, when the technique of circuit integration toreplace LSI may emerge, the functional blocks may be integrated by usingsuch technique. For example, the adaptation of biotechnology is one ofsuch possibilities.

INDUSTRIAL APPLICABILITY

The network node and the mobile terminal according to the presentinvention provide such effects that the mobile node having a pluralityof interfaces, with which an operator is performing communicationaccording to the flow information defined by a policy, can carry outcommunication by selecting an interface suitable for the flow, and theinvention can be applied to the communication technique using IP orrouting technique to change the route of flow.

1. An integrated circuit, which, in operation, controls a process of amobile terminal having a plurality of interfaces, comprising: a memory,which, in operation, stores flow information including (i) flowidentification information identifying a traffic flow which istransmitted or received by a first interface of the plurality ofinterfaces of the mobile terminal, and (ii) network identificationinformation identifying a second access network which is connected to asecond interface of the plurality of interfaces different from the firstinterface; and circuitry coupled to the memory, the circuitry, inoperation, controls the process including: identifying the second accessnetwork, over which said traffic flow can be routed, based on the flowinformation; and moving said traffic flow from a source access networkconnected to the first interface to the identified second access networkconnected to the second interface.
 2. The integrated circuit accordingto claim 1, wherein the second access network is a trusted accessnetwork.
 3. The integrated circuit according to claim 1, wherein saidtraffic flow can be transmitted or received only by the identifiedsecond access network.
 4. An integrated circuit, which, in operation,controls a process of a mobile terminal having a plurality ofinterfaces, comprising: a memory, which, in operation, stores flowinformation including (i) flow identification information identifying atraffic flow which is transmitted or received by a first interface ofthe plurality of interfaces of the mobile terminal, and (ii) networkidentification information identifying one or more access networks; andcircuitry coupled to the memory, the circuitry, in operation, controlsthe process including: identifying a second access network connected toa second interface of the plurality of interfaces different from thefirst interface as an access network for routing said traffic flow incase the flow information includes the network identificationinformation identifying the second access network; and moving saidtraffic flow from a source access network connected to the firstinterface to the identified second access network connected to thesecond interface.
 5. The integrated circuit according to claim 4,wherein the second access network is a trusted access network.
 6. Theintegrated circuit according to claim 4, wherein said traffic flow canbe transmitted or received only by the identified second access network.7. An integrated circuit, which, in operation, controls a process of anetwork node, comprising: a memory, which, in operation, stores flowinformation including (i) flow identification information identifying atraffic flow which is transmitted or received by a first interface of aplurality of interfaces of a mobile terminal, and (ii) networkidentification information identifying a second access network which isconnected to a second interface of the plurality of interfaces differentfrom the first interface; and circuitry coupled to the memory, thecircuitry, in operation, controls the process including notifying themobile terminal of the flow information; wherein the mobile terminal iscapable of identifying the second access network, over which saidtraffic flow can be routed, based on the flow information and movingsaid traffic flow from a source access network connected to the firstinterface to the identified second access network connected to thesecond interface.
 8. The integrated circuit according to claim 7,wherein the second access network is a trusted access network.
 9. Theintegrated circuit according to claim 7, wherein said traffic flow canbe transmitted or received only by the identified second access network.